NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Cybersecurity
DFIR Tools Intro
Master the modern DFIR stack. Deploy Velociraptor for deep endpoint forensics at scale and orchestrate the entire incident response lifecycle within TheHive.
Room tasks
1Introduction to Velociraptor
2Introduction to TheHive & Cortex
3Case Management Workflow Walkthrough
4Putting It Together
Frequently Asked Questions
What is Velociraptor used for?
Velociraptor is an open-source endpoint visibility and forensics tool. It collects artifacts and runs hunts across many machines at once, which speeds up incident investigations.
What is TheHive?
TheHive is an open-source security incident response platform. Teams use it to manage cases, tasks, and observables, and to collaborate on investigations from alert to closure.
Why combine Velociraptor and TheHive?
Velociraptor gathers endpoint evidence while TheHive tracks the case, so findings feed straight into investigation workflows. You can practice this combined stack in this free Codelivly room.